This vulnerability in Piotnet Addons For Elementor Pro is classified as CWE-862, indicating missing authorization controls. It affects all versions up to 7.1.17. The CVSS 3.1 base score is 7.5, with attack vector network, low attack complexity, no privileges required, no user interaction, and impact limited to availability (denial of service). No patch or official fix has been published by the vendor, and no exploits are known in the wild. The vulnerability could allow an attacker to perform actions that should be restricted, potentially causing denial of service.

The vulnerability impacts the availability of the affected system by allowing unauthorized actions that could disrupt service. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits have been reported, so active exploitation is not confirmed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is released, users should limit exposure by restricting access to the affected plugin and monitoring for updates from Piotnet. No vendor advisory or official remediation level is currently available.